AI
Product
AION
32
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 11Medium 14Low 4
Watch
Add AION to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-52642 | 6.5 | Mar 16 | HCL AION is affected by an internal filesystem paths disloser vulnerability Affected: 2.0 |
| CVE-2025-52623 | 6.5 | Feb 3 | HCL AION is affected by an Autocomplete HTML Attribute Not Disabled for Password Field vulnerability Affected: 2.0 |
| CVE-2025-52629 | 6.1 | Feb 3 | HCL AION is susceptible to Missing Content-Security-Policy Affected: 2.0 |
| CVE-2025-52624 | 6.1 | Oct 10 | HCL AION is susceptible to Bypass of the script allow list configuration vulnerability Affected: 2.0 |
| CVE-2025-62313 | 5.4 | May 14 | HCL AION is affected by a vulnerability where adequate protections against brute-force attempts are not enforced. Affected: 2.1.0 |
| CVE-2025-62310 | 5.4 | May 14 | HCL AION is affected by a vulnerability where encryption is not enforced for certain data transmissions or operations Affected: 2.1.0 |
| CVE-2025-52641 | 5.3 | Apr 15 | Internal Filesystem Exploration vulnerability Affected: 2.0 |
| CVE-2025-52646 | 5.3 | Mar 16 | HCL AION is affected by a vulnerability where certain offering configurations may permit execution of potentially harmful SQL queries. Affected: 2.0 |
| CVE-2025-52645 | 5.3 | Mar 16 | HCL AION is affected by a vulnerability where model packaging and distribution mechanisms may not include sufficient authenticity verification. Affected: 2.0 |
| CVE-2025-52649 | 5.3 | Mar 16 | HCL AION is affected by a vulnerability where certain identifiers may be predictable in nature Affected: 2.0 |
| CVE-2025-52633 | 5.3 | Feb 3 | HCL AION is susceptible to Missing Content-Security-Policy Affected: 2.0 |
| CVE-2025-62305 | 5.1 | May 14 | HCL AION is affected by a vulnerability where certain operations may trigger out-of-band interactions Affected: 2.1.0 |
| CVE-2025-62308 | 5.1 | May 14 | HCL AION is affected by a vulnerability where sensitive backend infrastructure details may be exposed Affected: 2.1.0 |
| CVE-2025-62311 | 4.3 | May 14 | HCL AION is affected by a vulnerability where backend service details may be transmitted over insecure HTTP channels. Affected: 2.1.0 |
Showing 14
